This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/ci8f7Y86uB9atamo1D3e8sszzV0.roa File: ci8f7Y86uB9atamo1D3e8sszzV0.roa (raw, json) Hash identifier: JE0+am3liaO3am6zHqUi0SmfiCv9crbc5X4aX8Cwg8E= Subject key identifier: 72:2F:1F:ED:8F:3A:B8:1F:5A:B5:A9:A8:D4:3D:DE:F2:CB:33:CD:5D Certificate issuer: /CN=ed89298644ed486ded509d946a6d6d839589ce11 Certificate serial: 019B783503C4497AE0195B26526A7F33D586 Authority key identifier: ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/ci8f7Y86uB9atamo1D3e8sszzV0.roa Signing time: Thu 01 Jan 2026 06:18:18 +0000 ROA not before: Thu 01 Jan 2026 06:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50689 IP address blocks: 195.191.222.0/24 maxlen: 24 195.191.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:03:c4:49:7a:e0:19:5b:26:52:6a:7f:33:d5:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed89298644ed486ded509d946a6d6d839589ce11 Validity Not Before: Jan 1 06:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=722f1fed8f3ab81f5ab5a9a8d43ddef2cb33cd5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0d:ec:01:cc:b7:f8:e9:d1:f5:1b:4e:4b:e2: fe:ab:7e:05:e6:90:2c:d0:1e:fd:e0:5a:80:e2:e3: 10:72:c1:6e:fd:0f:27:53:3e:cb:de:0c:39:c9:4c: 05:f9:86:1d:85:d9:1e:bf:47:53:2a:af:b3:03:dd: f4:b6:df:f7:8a:1c:69:d8:9f:c0:82:c8:a7:80:68: 82:04:51:94:db:3f:4c:c0:63:58:92:95:1a:11:5b: f5:cf:36:7d:4a:bc:92:f7:f3:f2:3c:b4:f3:0e:87: 42:8a:3b:be:93:5f:54:16:c9:07:71:7b:d2:37:54: f2:49:44:0b:45:dd:30:9a:64:90:5e:ba:9d:e7:f5: d3:0e:3e:9c:9c:5d:cc:b7:79:10:0c:4a:fe:e5:33: f9:55:76:fe:c4:a9:69:69:c3:ba:37:0c:20:d3:02: db:d9:ec:60:c1:74:4b:78:54:d6:7e:77:d6:c1:c3: 66:c6:ec:9f:91:bf:30:b1:a4:9e:ca:13:fe:97:b5: 5a:ec:de:cf:63:e8:71:5c:c3:5e:86:43:c3:86:86: aa:4a:eb:e5:64:d5:48:09:02:b7:14:a7:79:37:ec: 12:f8:bc:de:e3:66:6b:dd:fc:c1:dc:6d:dc:45:26: e4:1a:6d:d4:e5:f8:1d:21:25:bc:8f:f0:7c:0f:60: aa:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:2F:1F:ED:8F:3A:B8:1F:5A:B5:A9:A8:D4:3D:DE:F2:CB:33:CD:5D X509v3 Authority Key Identifier: keyid:ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/ci8f7Y86uB9atamo1D3e8sszzV0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.191.222.0/23 Signature Algorithm: sha256WithRSAEncryption 03:d5:db:e7:1a:18:62:30:c4:56:f3:34:2f:9f:00:ff:b0:3a: de:64:71:c6:95:8f:3b:0b:71:f2:f3:b5:78:77:a0:8b:2d:a3: 17:66:11:f9:9e:e3:1d:f3:38:b4:2d:35:bb:91:85:43:ae:3e: ba:c2:f5:11:9d:ee:97:36:11:fc:5d:43:80:66:c5:ce:66:dc: 10:27:19:f3:6f:5b:55:53:b2:b8:1f:b8:15:e7:8e:4c:db:84: 9b:04:d2:da:06:c6:d0:fc:7b:32:a7:5f:81:63:b0:85:3c:94: 8b:52:d7:7c:1e:cb:7b:34:b4:86:2b:0d:d3:90:8f:ed:22:61: b8:3e:d8:1f:43:7e:2a:cb:c0:b4:8d:cf:6a:9c:3b:e1:e6:f8: 26:f7:77:59:2f:22:e2:5a:18:6d:a7:e4:02:5c:6b:76:cd:e7: d4:17:0b:29:ac:aa:1e:3c:11:89:d4:5b:e0:1b:a8:ce:2a:d5: 76:ce:a5:47:7c:87:98:d5:a1:3c:24:01:95:90:5e:ce:0a:29: 0c:5f:4c:c7:50:02:f8:26:81:04:6c:0e:07:b0:5a:05:f2:e0: fb:24:31:72:59:ed:f3:2a:9f:1a:14:e4:f4:57:28:f3:e9:e9: 71:6c:13:65:70:66:ce:cc:ab:7e:78:d9:5e:61:66:b2:9c:e0: 29:be:08:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NQPESXrgGVsmUmp/M9WGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkODkyOTg2NDRlZDQ4NmRlZDUwOWQ5NDZhNmQ2ZDgzOTU4 OWNlMTEwHhcNMjYwMTAxMDYxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjJmMWZlZDhmM2FiODFmNWFiNWE5YThkNDNkZGVmMmNiMzNjZDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA3sAcy3+OnR9RtOS+L+q34F5pAs 0B794FqA4uMQcsFu/Q8nUz7L3gw5yUwF+YYdhdkev0dTKq+zA930tt/3ihxp2J/A gsingGiCBFGU2z9MwGNYkpUaEVv1zzZ9SryS9/PyPLTzDodCiju+k19UFskHcXvS N1TySUQLRd0wmmSQXrqd5/XTDj6cnF3Mt3kQDEr+5TP5VXb+xKlpacO6Nwwg0wLb 2exgwXRLeFTWfnfWwcNmxuyfkb8wsaSeyhP+l7Va7N7PY+hxXMNehkPDhoaqSuvl ZNVICQK3FKd5N+wS+Lze42Zr3fzB3G3cRSbkGm3U5fgdISW8j/B8D2CqpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHIvH+2POrgfWrWpqNQ93vLLM81dMB8GA1UdIwQY MBaAFO2JKYZE7Uht7VCdlGptbYOVic4RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1lrcGhrVHRTRzN0VUoyVWFtMXRnNVdKemhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xNDE4ODctNTUwNy00NWE1LThiMGEt NTdhMWYwYjMyZjAxLzEvY2k4ZjdZODZ1QjlhdGFtbzFEM2U4c3N6elYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8xNDE4ODctNTUwNy00NWE1LThiMGEtNTdhMWYwYjMyZjAx LzEvN1lrcGhrVHRTRzN0VUoyVWFtMXRnNVdKemhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw7/eMA0G CSqGSIb3DQEBCwUAA4IBAQAD1dvnGhhiMMRW8zQvnwD/sDreZHHGlY87C3Hy87V4 d6CLLaMXZhH5nuMd8zi0LTW7kYVDrj66wvURne6XNhH8XUOAZsXOZtwQJxnzb1tV U7K4H7gV545M24SbBNLaBsbQ/Hsyp1+BY7CFPJSLUtd8Hst7NLSGKw3TkI/tImG4 PtgfQ34qy8C0jc9qnDvh5vgm93dZLyLiWhhtp+QCXGt2zefUFwsprKoePBGJ1Fvg G6jOKtV2zqVHfIeY1aE8JAGVkF7OCikMX0zHUAL4JoEEbA4HsFoF8uD7JDFyWe3z Kp8aFOT0Vyjz6elxbBNlcGbOzKt+eNleYWaynOApvghT -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:50 2026 by rpki-client